Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2024/03/06 10:50 a.m.•29 views

BIT-ARGO-WORKFLOWS-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

6.5CVSS6.2AI score0.00963EPSS
SaveExploits1References3
NVD
NVD
•added 2021/08/03 12:15 a.m.•33 views

CVE-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

6.5CVSS0.00963EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/08/03 12:15 a.m.•26 views

CVE-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

6.5CVSS6.6AI score0.00963EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/02 11:17 p.m.•91 views

CVE-2021-37914

CVE-2021-37914 affects Argo Workflows (through 3.1.3). When EXPRESSION_TEMPLATES is enabled and untrusted users can specify input parameters for runs, an attacker can disrupt a workflow because expression template output is evaluated. The issue is tied to how template expressions are processed, e...

6.5CVSS6.2AI score0.00963EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/02 11:17 p.m.•9 views

CVE-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

6.9CVSS0.00963EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•9 views

CVE-2021-37914: Improper Input Validation

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

6.5CVSS5.7AI score0.00963EPSS
SaveExploits1References2
Rows per page
Query Builder